ua-tracer by Paul Kinlan

ua-tracer

what does a user agent actually fetch, follow & run?

← all traces

Trace FW9oxLXK

First seen: 2026-07-02 19:21:58.612 UTC
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1
Bot verification: Not a known bot (no IP-range check applies).

What this user agent did

Directly-referenced assets:

✓ fetched CSS ✓ fetched JS ✓ fetched image ✓ fetched font (HTML)

Document-level link hints:

✓ fetched favicon ✗ fetched apple-touch-icon ✓ fetched web manifest ✓ fetched preload ✗ fetched prefetch

Second-level follows (proves it parsed the linking file):

✓ followed CSS background-image ✓ followed CSS @font-face ✗ followed manifest icon ✓ followed CSS @import

Frames (does it descend into iframes?):

✓ fetched iframe document ✓ descended into iframe (loaded inner image)

Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):

✓ sent a CSP/Reporting report (any path) ✓ delivered via report-uri/Report-To header (no JS) ✓ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)

Social embed (Open Graph / Twitter card images):

✗ fetched og:image ✗ fetched twitter:image

JavaScript execution:

✓ EXECUTED classic JS ✓ EXECUTED ES module ✓ posted client timing

Server-side request waterfall

Every request the server received for this trace, in receive order. +ms is the delta from the homepage request.

ReceivedΔKindMethodUser-Agent
2026-07-02 19:21:58.612 UTC +0 ms homepage GET Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1
request headers (13) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "host": "uatracer.com",
  "priority": "u=0, i",
  "referer": "https://paul.kinlan.me/",
  "sec-fetch-dest": "document",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "cross-site",
  "traceparent": "00-3421d2c5e1e06e5b3c90adedbf97e071-6eb37fc5857d9fa8-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-02 19:21:59.946 UTC +1334 ms Reporting API report (POST) POST Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1
request headers (19) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "cache-control": "max-age=0",
  "content-length": "351",
  "content-type": "application/csp-report",
  "cookie": "ua-tracer-trace=FW9oxLXK",
  "host": "uatracer.com",
  "origin": "null",
  "priority": "u=7, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-e6c8f25ae16d10e78d0c6b2c77b7d4d4-2a4dc41e2a047acc-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-report-body": "{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"documentURL\":\"https://uatracer.com/\",\"disposition\":\"report\",\"referrer\":\"https://paul.kinlan.me/\",\"effectiveDirective\":\"style-src-elem\",\"blockedURL\":\"inline\",\"originalPolicy\":\"style-src 'self'; report-uri /r/FW9oxLXK/p6njeBjP/csp-report; report-to ua-tracer\",\"statusCode\":200,\"sample\":\"\"}}"
}
2026-07-02 19:21:59.955 UTC +1343 ms font (HTML) GET Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1
request headers (15) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "cookie": "ua-tracer-trace=FW9oxLXK",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=3, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "font",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-0029f601ee4b7ede736634c240d93b1e-fcedd899cbfcfb44-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-02 19:21:59.964 UTC +1352 ms CSS GET Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1
request headers (14) 
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "cookie": "ua-tracer-trace=FW9oxLXK",
  "host": "uatracer.com",
  "priority": "u=1, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-e3e9965202a050b63190d4648441511e-9492e6649e933665-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-02 19:21:59.968 UTC +1356 ms JS GET Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1
request headers (14) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "cookie": "ua-tracer-trace=FW9oxLXK",
  "host": "uatracer.com",
  "priority": "u=1, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "script",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-394ec242a202533381d6d9070406571a-3c1e138b6993afc6-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-02 19:21:59.972 UTC +1360 ms ES module GET Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1
request headers (15) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "cookie": "ua-tracer-trace=FW9oxLXK",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=1, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "script",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-5bbb20608bc5ea1c5d81cbdd3e700c9b-cec5663bdb9dfffc-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-02 19:22:00.016 UTC +1404 ms iframe document GET Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1
request headers (14) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "cookie": "ua-tracer-trace=FW9oxLXK",
  "host": "uatracer.com",
  "priority": "u=0, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "iframe",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-092666d5fb538d833bc4e6160f83578d-a27bb89c10e066cd-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-02 19:22:02.475 UTC +3863 ms web app manifest GET Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1
request headers (14) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "cookie": "ua-tracer-trace=FW9oxLXK",
  "host": "uatracer.com",
  "priority": "u=5, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "manifest",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-674f78d9a395934f76c876064c435110-7ae5bd746d707d24-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-02 19:22:02.477 UTC +3865 ms CSS @import (nested stylesheet) GET Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1
request headers (14) 
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "cookie": "ua-tracer-trace=FW9oxLXK",
  "host": "uatracer.com",
  "priority": "u=1, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-3c8ec465760d1a5a6739f42c7d7e3339-bbe7140e89616b76-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-02 19:22:03.110 UTC +4498 ms preload (image) GET Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1
request headers (14) 
{
  "accept": "image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "cookie": "ua-tracer-trace=FW9oxLXK",
  "host": "uatracer.com",
  "priority": "u=5, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-9d52ad442d5f46ca483e9c321a614a55-e5cc0e2b2dba3fb6-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-02 19:22:03.509 UTC +4897 ms Reporting API report (POST) POST Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1
request headers (19) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "cache-control": "max-age=0",
  "content-length": "351",
  "content-type": "application/csp-report",
  "cookie": "ua-tracer-trace=FW9oxLXK",
  "host": "uatracer.com",
  "origin": "null",
  "priority": "u=7, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-5954ba4a2f1147ddcb7ed45d91e9413e-2a1b1a519f33678d-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-report-body": "{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"documentURL\":\"https://uatracer.com/\",\"disposition\":\"report\",\"referrer\":\"https://paul.kinlan.me/\",\"effectiveDirective\":\"style-src-attr\",\"blockedURL\":\"inline\",\"originalPolicy\":\"style-src 'self'; report-uri /r/FW9oxLXK/p6njeBjP/csp-report; report-to ua-tracer\",\"statusCode\":200,\"sample\":\"\"}}"
}
2026-07-02 19:22:03.527 UTC +4915 ms CSS @font-face GET Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1
request headers (14) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "cookie": "ua-tracer-trace=FW9oxLXK",
  "host": "uatracer.com",
  "priority": "u=3, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "font",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-b476b76d17c5a6ed8d385865ba80238f-1b533d94b46ccd19-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-02 19:22:03.573 UTC +4961 ms image GET Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1
request headers (14) 
{
  "accept": "image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "cookie": "ua-tracer-trace=FW9oxLXK",
  "host": "uatracer.com",
  "priority": "u=5, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-270fe550e43eeab5e7bfd61bbc5e828b-b01a9228bc5c6903-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-02 19:22:03.574 UTC +4962 ms Reporting API report (POST) POST Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1
request headers (19) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "cache-control": "max-age=0",
  "content-length": "453",
  "content-type": "application/csp-report",
  "cookie": "ua-tracer-trace=FW9oxLXK",
  "host": "uatracer.com",
  "origin": "null",
  "priority": "u=7, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-6274ae6a5b7003ccd14174495e1bffea-9ca058a273431b2f-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-report-body": "{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"documentURL\":\"https://uatracer.com/\",\"disposition\":\"report\",\"referrer\":\"https://paul.kinlan.me/\",\"effectiveDirective\":\"style-src-attr\",\"blockedURL\":\"inline\",\"originalPolicy\":\"style-src 'self'; report-uri /r/FW9oxLXK/p6njeBjP/csp-report; report-to ua-tracer\",\"statusCode\":200,\"sample\":\"\",\"sourceFile\":\"https://uatracer.com:443/r/FW9oxLXK/p6njeBjP/main.js\",\"lineNumber\":45,\"columnNumber\":23}}"
}
2026-07-02 19:22:03.574 UTC +4962 ms Reporting API report (POST) POST Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1
request headers (19) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "cache-control": "max-age=0",
  "content-length": "351",
  "content-type": "application/csp-report",
  "cookie": "ua-tracer-trace=FW9oxLXK",
  "host": "uatracer.com",
  "origin": "null",
  "priority": "u=7, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-8c384449c4b6565dbfb348ba5a3ee718-4bd8a5ba2822adad-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-report-body": "{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"documentURL\":\"https://uatracer.com/\",\"disposition\":\"report\",\"referrer\":\"https://paul.kinlan.me/\",\"effectiveDirective\":\"style-src-attr\",\"blockedURL\":\"inline\",\"originalPolicy\":\"style-src 'self'; report-uri /r/FW9oxLXK/p6njeBjP/csp-report; report-to ua-tracer\",\"statusCode\":200,\"sample\":\"\"}}"
}
2026-07-02 19:22:03.576 UTC +4964 ms image inside iframe GET Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1
request headers (14) 
{
  "accept": "image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "cookie": "ua-tracer-trace=FW9oxLXK",
  "host": "uatracer.com",
  "priority": "u=5, i",
  "referer": "https://uatracer.com/r/FW9oxLXK/p6njeBjP/iframe",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-fcfad52e160310bdafc89d706345e42e-b131aa114d992125-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-02 19:22:03.576 UTC +4964 ms Reporting API report (POST) POST Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1
request headers (19) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "cache-control": "max-age=0",
  "content-length": "351",
  "content-type": "application/csp-report",
  "cookie": "ua-tracer-trace=FW9oxLXK",
  "host": "uatracer.com",
  "origin": "null",
  "priority": "u=7, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-880209f75c5979e0023647b36fbbfc81-566fe9c379601653-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-report-body": "{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"documentURL\":\"https://uatracer.com/\",\"disposition\":\"report\",\"referrer\":\"https://paul.kinlan.me/\",\"effectiveDirective\":\"style-src-attr\",\"blockedURL\":\"inline\",\"originalPolicy\":\"style-src 'self'; report-uri /r/FW9oxLXK/p6njeBjP/csp-report; report-to ua-tracer\",\"statusCode\":200,\"sample\":\"\"}}"
}
2026-07-02 19:22:03.576 UTC +4964 ms JS executed beacon GET Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1
request headers (14) 
{
  "accept": "image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "cookie": "ua-tracer-trace=FW9oxLXK",
  "host": "uatracer.com",
  "priority": "u=5, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-8ec258621c518145c31b29a31fb8cfa3-db64fb983218a419-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-02 19:22:03.576 UTC +4964 ms CSS background-image GET Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1
request headers (14) 
{
  "accept": "image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "cookie": "ua-tracer-trace=FW9oxLXK",
  "host": "uatracer.com",
  "priority": "u=5, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-8c9d7cce0b0ef7f03fe52ec675e7a46f-686ff12a0839e72e-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-02 19:22:03.597 UTC +4985 ms CSP violation report (POST) POST Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1
request headers (19) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "cache-control": "max-age=0",
  "content-length": "421",
  "content-type": "application/json",
  "cookie": "ua-tracer-trace=FW9oxLXK",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=7, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-0ad4d19925803c7de533348409284f71-af4e147c3afc3db6-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-report-body": "{\"source\":\"securitypolicyviolation\",\"violatedDirective\":\"style-src-attr\",\"effectiveDirective\":\"style-src-attr\",\"blockedURI\":\"inline\",\"documentURI\":\"https://uatracer.com/\",\"disposition\":\"report\",\"lineNumber\":45,\"sourceFile\":\"https://uatracer.com:443/r/FW9oxLXK/p6njeBjP/main.js\",\"ua\":\"Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1\"}"
}
2026-07-02 19:22:03.600 UTC +4988 ms Reporting API report (POST) POST Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1
request headers (19) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "cache-control": "max-age=0",
  "content-length": "2271",
  "content-type": "application/json",
  "cookie": "ua-tracer-trace=FW9oxLXK",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=7, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-9effeeb3893e1d05fd5ba3b369db3822-2aafe74268ec171b-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-report-body": "{\"source\":\"ReportingObserver\",\"reports\":[{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"https://paul.kinlan.me/\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-elem\",\"originalPolicy\":\"style-src 'self'; report-uri /r/FW9oxLXK/p6njeBjP/csp-report; report-to ua-tracer\",\"sourceFile\":null,\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200,\"lineNumber\":null,\"columnNumber\":null}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"https://paul.kinlan.me/\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/FW9oxLXK/p6njeBjP/csp-report; report-to ua-tracer\",\"sourceFile\":null,\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200,\"lineNumber\":null,\"columnNumber\":null}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"https://paul.kinlan.me/\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/FW9oxLXK/p6njeBjP/csp-report; report-to ua-tracer\",\"sourceFile\":null,\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200,\"lineNumber\":null,\"columnNumber\":null}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"https://paul.kinlan.me/\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/FW9oxLXK/p6njeBjP/csp-report; report-to ua-tracer\",\"sourceFile\":null,\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200,\"lineNumber\":null,\"columnNumber\":null}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"https://paul.kinlan.me/\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/FW9oxLXK/p6njeBjP/csp-report; report-to ua-tracer\",\"sourceFile\":\"https://uatracer.com:443/r/FW9oxLXK/p6njeBjP/main.js\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200,\"lineNumber\":45,\"columnNumber\":23}}],\"ua\":\"Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1\"}"
}
2026-07-02 19:22:03.600 UTC +4988 ms ES module executed GET Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1
request headers (14) 
{
  "accept": "image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "cookie": "ua-tracer-trace=FW9oxLXK",
  "host": "uatracer.com",
  "priority": "u=5, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-56decfe7d8a27fe6adea56c0048a09ee-9c5230dbb288af18-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-02 19:22:06.839 UTC +8227 ms favicon GET Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1
request headers (14) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "cookie": "ua-tracer-trace=FW9oxLXK",
  "host": "uatracer.com",
  "priority": "u=3, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-f6a53535a4786ff5343e67d0188f5366-e5a6cba3e2cd48be-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-02 19:22:07.393 UTC +8781 ms client timing POST POST Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1
request headers (18) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "cache-control": "max-age=0",
  "content-length": "3395",
  "content-type": "application/json",
  "cookie": "ua-tracer-trace=FW9oxLXK",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=7, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-e8027d6a2238e3f7a5ad56619ca4211c-61195efbb06e2108-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}

Client-side resource waterfall

Reported by performance.getEntriesByType('resource') after JS ran in the UA. This proves a real browser-grade engine, not just a downloader.

ResourceInitiatorStartDurationTimeline
report other 1337ms 1252ms
style.css link 1347ms 2522ms
font.woff2 link 1348ms 1603ms
manifest.json other 1348ms 3152ms
preload.png link 1348ms 3787ms
report other 1349ms 4231ms
photo.png img 1350ms 4672ms
report other 1350ms 4979ms
main.js script 1351ms 2048ms
report other 1351ms 5289ms
module.js script 1352ms 848ms
iframe iframe 1392ms 2667ms
import.css css 3870ms 1027ms
js-ran.gif?t=1783020123484 img 4898ms 2514ms
report other 4899ms 2030ms
css-bg.png css 4919ms 3248ms
csp-report other 4920ms 3247ms
css-font.woff2 css 4921ms 3246ms
report other 4921ms 3273ms
module-ran.gif?t=1783020123523 img 4939ms 3228ms